Dev tools · alternatives · 2026
24 alternatives to Metlo API Security
Open source API security platform
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Metlo API Security launched in 2022; newer entries below may have overtaken it.
- 1
Metlo - An Open Source API Security Tool Hey folks! Excited to share what we’ve been working on for the last couple months. Metlo is a self hosted, open source first API security platform that inventories, tests and protects your API endpoints: - We inventory your endpoints by scanning API traffic and detecting all your endpoints along with the sensitive data they contain. - We generate information your security team may find useful like Open API Specs and risk scores for each endpoint. - After this we discover vulnerabilities like unauthenticated endpoints returning sensitive data or…
2022 · github.com · its alternatives →
- 2QC
Hey everyone, excited to share something we’ve been working on the last few months! For context, Metlo is an open source API Security tool[0] we launched here on HN a couple months ago[1]. After working with a few customers over the last couple months, we realized there was a gap in other API testing solutions; especially when it comes to writing security tests. So we decided to completely gut and revamp our testing product - sharing that with you all today! Most Automated API Scanners only find generic vulnerabilities like misconfigured HSTS/CORS Headers and miss vulns specific to your…
2023 · its alternatives →
- 3
API Radar▲77We built API Radar to track exposed API keys from OpenAI, Claude, Gemini, and other major providers—in real time—from public GitHub repositories. Why? Leaked AI keys are everywhere. They power bots, cost companies thousands, and even expose user data. But no one had a clean dashboard to see the leaks as they happen — until now. What you’ll find: Full redacted + raw API key leaks Real-time feed of exposed repos Leaderboards by author, repo, and provider Filtering by provider (OpenAI, Claude, Gemini, etc.) Timeline of key exposure trends Built for security researchers, devs, and AI companies…
Jan 2026 · apiradar.live · its alternatives →
- 4
- 5
Permit.io▲677The new Permit.io CLI brings developer-first workflows to access control. Define, test, deploy, and enforce fine-grained authorization using AI, CI/CD, GitOps, and OpenAPI — all from your terminal
2023 · permit.io · its alternatives →
- 6
Syncloop▲93API development platform to create, deploy and test APIs
2023 · syncloop.ai · its alternatives →
- 7
Apidog▲570Development teams often struggle with using multiple tools like Postman and Swagger for API design, development, and testing. This fragmented approach leads to outdated API specs and chaotic collaboration. So we built Apidog: a single, unified API platform for team collaboration. It has a beautiful interface that makes it easy to create API spec, generate request data from API spec, validate responses, create mock data, orchestrate test scenarios, and publish API documentation. Apidog = Postman + Swagger + Mock + JMeter.
2024 · apidog.com · its alternatives →
- 8
SSOReady▲144Open source developer tools for enterprise single sign-on
2024 · github.com · its alternatives →
- 9
- 10
Secure, orchestrate, and manage infrastructure secrets
2021 · 1password.com · its alternatives →
- 11
- 12TC
2015 · cloud.tyk.io · its alternatives →
- 13
- 14
Arlopass▲81AI wallet that lets web apps use your models, not your keys
Mar 2026 · arlopass.com · its alternatives →
- 15
Turnkey▲71Simple APIs to securely manage your crypto private keys
2023 · turnkey.com · its alternatives →
- 16
- 17
- 18
- 19
Abracadalo▲82API toolkit to make your Adalo apps more powerful
2022 · abracadalo.com · its alternatives →
- 20
- 21
APImetrics▲72Simple, powerful, secure API performance monitoring
2021 · apicontext.com · its alternatives →
- 22
I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
Nov 2025 · github.com · its alternatives →
- 23
Develop faster, eliminate complexity, protect your secrets
2022 · 1password.com · its alternatives →
- 24
Hi, my name is Miguel and I am very happy to share what's been months worth of work :) The project has rough edges for sure, but any early feedback, comments or concerns are appreciated! === The Problem === You work on the Security and Operations (SecOps) team in charge of your organization's Software Supply Chain Security. You feel pretty good about the state of things already, your developer teams are signing their commits, deliverables, scanning for vulnerabilities,… Life is good! Then you realize that you are not compliant with the latest security requirements. You get referred to…
2023 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →